This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer (raw, json) Hash identifier: L2xVtpiqM39eU+VBVtirRrIXxhzQDbxI8lFZS4jqAtQ= Subject key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E373C4F2074B93307EF6A9CFB8383C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15722 IP: 193.28.145.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:3c:4f:20:74:b9:33:07:ef:6a:9c:fb:83:83:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd86b8ce222482a14f9b13468ce57e9992684961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:f7:67:29:99:33:eb:5f:5f:d4:39:79:aa: 9d:80:51:36:bc:81:90:24:bd:d0:bb:5c:68:0e:d2: e0:ff:f7:6c:0b:6b:a3:0c:db:5a:8e:a5:93:c6:44: 4a:da:9a:d7:01:67:5b:91:16:1c:e2:6d:c2:0d:b7: 56:92:3c:46:27:86:6e:83:83:05:b3:30:c0:91:c7: 28:91:42:3f:c2:4d:35:c5:8a:72:8f:95:73:16:06: 27:39:b3:e2:cb:db:2a:cf:47:36:8a:d7:df:6c:3e: c2:62:85:b6:28:c6:d0:ef:f3:c6:0b:71:fc:ff:3c: 64:72:90:8f:20:fb:b7:93:e8:fe:aa:7e:f4:cf:7f: 1d:ed:c1:da:d3:0c:bb:bf:b4:b3:0f:83:f8:ad:14: 7a:c6:1b:af:e3:ea:e4:07:6f:8a:70:e2:08:6c:75: 68:d9:10:be:8d:f3:4a:92:9c:9f:98:94:ed:5e:e1: ee:d3:a1:c1:be:76:2b:a9:36:52:89:33:1d:04:c0: ac:ab:1b:c8:ab:d2:e8:7e:42:5f:e9:81:6c:3d:0b: 38:1f:1c:43:fb:31:cd:b2:0f:85:7a:10:55:f1:42: a7:f1:e7:0f:09:ba:fa:e4:db:f5:50:34:df:a7:88: d3:f5:c1:13:5a:87:99:2c:a4:27:a2:a9:39:fe:7b: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.145.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15722 Signature Algorithm: sha256WithRSAEncryption 87:fa:cd:25:28:0e:1e:7b:d5:aa:b3:52:f1:3a:a2:5e:64:5f: dd:16:90:80:72:46:c0:c9:68:78:5d:2a:ce:19:fc:f1:42:ed: c4:66:02:06:18:a0:ae:0c:9e:d3:b5:77:c9:99:bf:fb:4f:59: d2:73:c4:cc:35:0c:04:71:ff:74:29:a0:e9:96:0c:9c:32:af: d7:3a:db:5f:f8:9d:f7:92:57:4f:14:91:a9:d0:80:bf:48:ea: 9d:16:96:d6:d1:54:54:39:a3:ca:15:cf:26:bc:14:90:97:c5: b6:63:2a:5d:ce:fa:32:3a:66:e2:1f:15:e6:39:f9:ab:bb:c5: 17:ab:1e:90:ed:ce:32:b0:2c:f3:f9:4a:73:dc:5c:99:51:81: 1e:b2:d6:01:19:5f:92:2d:a7:ab:59:18:c2:ba:cf:fb:da:6e: 5d:e3:94:c4:d9:4b:ea:f8:b7:7e:10:3f:50:2c:11:a6:96:c6: 3b:61:c1:d0:ba:6f:0a:11:82:27:e3:d5:c1:e2:00:ce:2d:f3: 73:1d:73:55:24:60:1c:d1:3b:ea:04:bf:87:4c:53:ec:2d:0a: 43:be:da:31:30:27:5f:e8:0f:48:5f:c1:52:0c:a9:e4:db:6b: f1:90:7f:99:35:03:3c:98:cf:1c:a2:60:23:c5:85:dc:84:86: 35:a4:69:e2 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+NzxPIHS5Mwfvapz7g4PGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDg2YjhjZTIyMjQ4MmExNGY5YjEzNDY4Y2U1N2U5OTkyNjg0OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd33ZymZM+tfX9Q5eaqdgFE2vIGQ JL3Qu1xoDtLg//dsC2ujDNtajqWTxkRK2prXAWdbkRYc4m3CDbdWkjxGJ4Zug4MF szDAkccokUI/wk01xYpyj5VzFgYnObPiy9sqz0c2itffbD7CYoW2KMbQ7/PGC3H8 /zxkcpCPIPu3k+j+qn70z38d7cHa0wy7v7SzD4P4rRR6xhuv4+rkB2+KcOIIbHVo 2RC+jfNKkpyfmJTtXuHu06HBvnYrqTZSiTMdBMCsqxvIq9LofkJf6YFsPQs4HxxD +zHNsg+FehBV8UKn8ecPCbr65Nv1UDTfp4jT9cETWoeZLKQnoqk5/nsVLQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFM2GuM4iJIKhT5sTRozlfpmSaElhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzYwODEx NC1hOTdhLTQ4NzctOTRjNy1kYzJkNTU3NTAzZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjA4MTE0 LWE5N2EtNDg3Ny05NGM3LWRjMmQ1NTc1MDNlZS8xL3pZYTR6aUlrZ3FGUG14Tkdq T1YtbVpKb1NXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRyRMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Aj1qMA0GCSqGSIb3DQEBCwUAA4IBAQCH+s0lKA4ee9Wqs1LxOqJeZF/dFpCAckbA yWh4XSrOGfzxQu3EZgIGGKCuDJ7TtXfJmb/7T1nSc8TMNQwEcf90KaDplgycMq/X Ottf+J33kldPFJGp0IC/SOqdFpbW0VRUOaPKFc8mvBSQl8W2YypdzvoyOmbiHxXm Ofmru8UXqx6Q7c4ysCzz+Upz3FyZUYEestYBGV+SLaerWRjCus/72m5d45TE2Uvq +Ld+ED9QLBGmlsY7YcHQum8KEYIn49XB4gDOLfNzHXNVJGAc0TvqBL+HTFPsLQpD vtoxMCdf6A9IX8FSDKnk22vxkH+ZNQM8mM8comAjxYXchIY1pGni -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:53 2026 by rpki-client